Behavioral task
behavioral1
Sample
VideoPaulinha.scr
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
VideoPaulinha.scr
Resource
win10v2004-20240226-en
General
-
Target
16940600838e271033ffb619493313c4_JaffaCakes118
-
Size
228KB
-
MD5
16940600838e271033ffb619493313c4
-
SHA1
39c4714a177d7997ebea1d9edd80783c97b0e51f
-
SHA256
d2b59a1c6fb535ae3f0f1b46a83ccd53b3535daac89bbd181b428e65a0e39a18
-
SHA512
65ae25e7df1260ae99cfceb67cc2e3390477d89341d427f8e61d1b133889eeae558a65976568f000acfefca5b9f17c571df3c306442fbc6dcad5b52def56163e
-
SSDEEP
6144:wsU1J8Z9sdI52JdBwq5W0mW1gEB6jfgniBmhVKg+3CSQuloMDhR6SlhPz:wfJBI52JwceW1Tggn2mVKMMDhTlFz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/VideoPaulinha.scr upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VideoPaulinha.scr
Files
-
16940600838e271033ffb619493313c4_JaffaCakes118.zip
-
VideoPaulinha.scr.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE